AbuseIPDB » 197.251.195.89

197.251.195.89 was found in our database!

This IP was reported 291 times. Confidence of Abuse is 97%: ?

97%

ISP	Ghana Telecommunications Company Limited
Usage Type	Fixed Line ISP
ASN	AS29614
Domain Name	ghana.com
Country	Ghana
City	Kumasi, Ashanti

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 197.251.195.89

Whois 197.251.195.89

IP Abuse Reports for 197.251.195.89:

This IP address has been reported a total of 291 times from 133 distinct sources. 197.251.195.89 was first reported on March 21st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-06-21 00:01:42 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/197.251.195.89	SSH
rtbh.com.tr	2025-06-19 20:07:15 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-19 00:18:18 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/197.251.195.89	SSH
rtbh.com.tr	2025-06-18 20:07:14 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-18 00:08:19 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/197.251.195.89	SSH
david1117	2025-06-17 10:26:44 (2 weeks ago)	[sshut] (pubdev) SSH brute force attempt	DDoS Attack Brute-Force SSH
trung.fun	2025-06-16 23:49:11 (3 weeks ago)	Email ...	Email Spam Hacking Brute-Force
kreativstrecke	2025-06-16 13:34:07 (3 weeks ago)	2025-06-16T15:34:06.003598+02:00 srv03 postfix/submission/smtpd[3592605]: warning: unknown[197.251.1 ... show more2025-06-16T15:34:06.003598+02:00 srv03 postfix/submission/smtpd[3592605]: warning: unknown[197.251.195.89]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2025-06-16T15:34:06.652156+02:00 srv03 postfix/submission/smtpd[3592605]: lost connection after AUTH from unknown[197.251.195.89] 2025-06-16T15:34:06.652436+02:00 srv03 postfix/submission/smtpd[3592605]: disconnect from unknown[197.251.195.89] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
Spyerfox	2025-06-15 21:48:39 (3 weeks ago)	Jun 15 23:48:36 <server> sshd\[9798\]: Invalid user user from 197.251.195.89Jun 15 23:48:38 <server> ... show moreJun 15 23:48:36 <server> sshd\[9798\]: Invalid user user from 197.251.195.89Jun 15 23:48:38 <server> sshd\[9798\]: Failed password for invalid user user from 197.251.195.89 port 48323 ssh2 ... show less	Brute-Force SSH
NetWatch	2025-06-14 20:49:14 (3 weeks ago)	The IP 197.251.195.89 tried multiple SSH logins	Brute-Force SSH
rtbh.com.tr	2025-06-14 20:07:09 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
raspi4	2025-06-14 16:22:20 (3 weeks ago)	Fail2Ban Ban Triggered	Brute-Force SSH
Anonymous	2025-06-14 02:36:33 (3 weeks ago)	Jun 14 04:36:25 d-code sshd[16340]: Invalid user test from 197.251.195.89 port 39218 Jun 14 04 ... show moreJun 14 04:36:25 d-code sshd[16340]: Invalid user test from 197.251.195.89 port 39218 Jun 14 04:36:32 d-code sshd[16340]: error: PAM: Authentication failure for illegal user test from 197.251.195.89 Jun 14 04:36:32 d-code sshd[16340]: Failed keyboard-interactive/pam for invalid user test from 197.251.195.89 port 39218 ssh2 ... show less	Brute-Force SSH
TZNOC	2025-06-13 23:23:23 (3 weeks ago)	Mail credential brute-force attack (SM3) #1	Email Spam Brute-Force
rtbh.com.tr	2025-06-13 20:07:08 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩